Privacy Policy

What runs before you choose

Nothing optional. Until you accept analytics, no analytics or measurement provider is loaded at all — the scripts are not on the page, so they cannot set cookies or receive your visit. If your browser sends a Do Not Track signal, analytics stay off regardless of what the banner says.

The site is hosted on Vercel, so your request reaches Vercel’s servers in order for the page to be delivered at all. That is unavoidable for any hosted website.

Analytics providers we use

If you accept analytics, these providers are loaded. They are named here so you can read their own policies before deciding:

• Google Analytics 4 — page views and interaction events. Google may set cookies and processes data under its own terms. Google privacy policy
• Ahrefs Web Analytics — cookieless traffic measurement. Ahrefs privacy policy
• Vercel Analytics — cookieless page-performance and traffic measurement from our host. Vercel privacy policy
• Our own event log — the anonymous events described below are sent to our own server rather than to an analytics company, and stored in a Supabase database we control. Your browser never contacts Supabase directly.

If analytics are accepted, we may record anonymous session events such as page views, button and link clicks, internal searches, scroll depth, sections that enter the viewport, approximate time spent on a page, referrer type, device category, viewport size and page-speed measurements. Quiz completion is recorded only as broad modes, such as preset versus custom targets; answer-bearing URLs and exact calorie or macro targets are removed before storage. We do not put email addresses, payment details, health information or typed meal-plan form answers into this behaviour log.

You can change your mind at any time with the Privacy choices button in the footer. Withdrawing analytics stops the live tracker and reloads the page without the optional provider scripts.

Advertising

The site does not currently run advertising, and no advertising or ad-network script is loaded on any page. If display advertising is introduced in future it will be documented here, with its own consent controls, before any ad script loads.

Things stored on your device

Saved plans, shopping-list ticks, household portion settings, quiz progress and your analytics choice are stored in your browser’s local storage. Each consent record includes its format version and the time it was last updated; choices expire after a year so the site can ask again. These records stay on that device and are not uploaded to an account. You can remove saved plans from the saved plans page, or clear this website’s stored data in your browser settings to remove all of it.

Things you send us

If you submit feedback, request a plan by email or join the MealPrep+ waitlist, we receive what you typed and the email address you gave, and use it to answer you, deliver what you asked for, or fix the page in question. Email is delivered through Resend. Please do not send medical details through these forms.

Using MealPrep in an AI assistant

MealPrep can be connected to AI assistants such as ChatGPT through a public, read-only service at mealprep.org.uk/mcp. It needs no account and collects no name, email, payment details or identifiers. The assistant sends us the search or plan options it chose from your request (for example a diet, an allergen to avoid, a protein target or a household size). These can reflect health-related preferences. We use them only to return recipes and plans, hold them in memory for the moment it takes to answer, and do not store them; we never see your conversation. To understand usage and fix faults we keep a count-only record of each call: the time, which tool ran, whether it worked, how long it took, how many results it returned and which option names were used, but not their values and no IP address or identifier. These records are kept for up to 12 months and then deleted automatically. To limit abuse we briefly (about a minute) keep a one-way scrambled form of the caller’s network address to count requests; it is not linked to the records above. The records are used only by us, for our own reporting; we do not share them or use them for advertising or profiling. Nothing here is medical or dietetic advice, and nutrition and allergen information is approximate and must be checked against packaging; speak to a GP or registered dietitian about a medical condition, allergy or eating disorder, or if you are under 18.

Affiliate links

Some container and accessory links are Amazon UK affiliate links. If you click one, Amazon receives standard referral information and applies its own cookies and privacy policy from that point on. We record that a click happened, but not who you are. See our terms for how affiliate commission works.

Your rights and contact

You can ask what we hold about you, ask for it to be corrected or deleted, or object to processing, by emailing mealprep.org.uk@proton.me. Because there are no accounts and the behaviour log is anonymous, in most cases the practical answer is that everything tied to you is already on your own device and clearing site data removes it. If you are unhappy with how we have handled a privacy question you can complain to the Information Commissioner’s Office.